tree a0a9a35cc9e8c0e2539e169bb1fe3249c74eaa23
parent 8613bfa353f27c736273fa132a6a61a50fc7556b
author Heschi Kreinick <heschi@google.com> 1644612087 -0500
committer Heschi Kreinick <heschi@google.com> 1645040477 +0000

internal/secret: add flag support

To avoid hardcoding secret names everywhere, we want to pass them via
flags instead. As a convenience, introduce a new flag type that resolves
values of the form "secret:[project name/]<secret name>" using Secret
Manager.

This is a bit janky in the name of convenience: we need a SM client
before calling flag.Parse, which I decided should be initialized by the
user rather than implicitly. Typical usage will look like:

  var token = secret.Flag("token", "token used to do the thing")

  func main() {
    if err := secret.InitFlagSupport(context.Background()); err != nil {
      log.Fatal(err)
    }
    flag.Parse()
    fmt.Printf("My token is %v\n", *token)
  }

Supporting literal values might be unnecessary but I think it might be
helpful for local testing, and we can extend it with a file: prefix to
read from local files too.

For golang/go#51122.

Change-Id: Ie6102453c2242baf2e91b873e62e035f72a82584
Reviewed-on: https://go-review.googlesource.com/c/build/+/385185
Trust: Heschi Kreinick <heschi@google.com>
Run-TryBot: Heschi Kreinick <heschi@google.com>
Reviewed-by: Dmitri Shuralyov <dmitshur@golang.org>
Auto-Submit: Heschi Kreinick <heschi@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>